Would you trust someone who claims to work for the FBI, knows details about a scam you already suffered, and says they can recover your lost money? That is exactly how an IC3 scam, also known as an FBI scam or recovery scam, can target people who have already been victimized once.
On July 20, 2026, the Internet Crime Complaint Center (IC3) issued a new warning about criminals impersonating FBI and IC3 employees. According to the alert, scammers may offer to recover stolen funds, send malicious links, create fake profiles, and, in some cases, use AI-generated videos to make the scheme look more convincing.
The most important detail is simple: the IC3 does not charge people to recover stolen money and does not offer fund-recovery services through Facebook, Telegram, or other social media platforms. If someone unexpectedly contacts you with that kind of offer, treat it as a major red flag.
This scam takes advantage of an especially vulnerable moment: you have already lost money and are actively looking for a way to get it back.
That is when the scammer steps in, claiming to be an FBI agent, an IC3 employee, an investigator, or a recovery specialist who can help locate the criminals or recover the stolen funds.
This type of fraud is commonly known as a recovery scam or double-dip scam because the victim of one scam is targeted a second time by someone promising to recover what was lost.
The scale of cybercrime makes that promise especially tempting. According to the FBI’s Internet Crime Report, the IC3 received 1,008,597 complaints in 2025, while reported cybercrime losses reached nearly $21 billion.
The first contact may come through a phone call, email, social media account, online forum, or messaging platform.
In one example described by the FBI, a person who had already been scammed said they planned to file a complaint with the IC3. Soon afterward, they received a message from someone pretending to be an FBI agent.
The conversation moved from Facebook Messenger to Telegram. The fake agent then sent the victim a link claiming that the person needed to “update” their IC3 complaint.
That kind of approach can feel legitimate because it appears to continue a process the victim has already started. The scammer may know details about the previous fraud, use government branding, mention the FBI or IC3 by name, or send the victim to a website designed to look official.
The goal is to make you believe you are dealing with a real government representative.
A legitimate-looking profile, badge, logo, or government-style website does not prove that the person contacting you actually works for the FBI.
The FBI warning highlights several tactics that can make these scams harder to spot, including fake social media profiles, spoofed websites, malicious links, and AI-generated content.
Watch for these red flags:
A convincing logo or professional message is not enough. Always verify the organization and website independently before sharing personal or financial information.
Read more: How to Check If a Link Is Safe Before You Click
A recovery scam works because the criminal already knows what you want: your money back.
After losing money, people may search online for government agencies, investigators, attorneys, cybersecurity companies, or services that claim they can help. Scammers can position themselves directly in that path.
The promise becomes even more convincing when the criminal presents information connected to the original fraud.
That creates a dangerous sense of legitimacy. Instead of looking like a random scam message, the contact can appear to be part of an investigation that is already underway.
AI-generated content can add another layer of credibility. The FBI alert says criminals may use artificial intelligence to create videos that appear to show government representatives or other trusted figures.
The technology may look convincing, but the verification process should remain the same: do not trust a person simply because their face, voice, profile, or video appears legitimate.
If someone claims to represent the FBI or IC3, do not verify that person using the phone number, link, website, or account they sent you.
Instead, independently visit the official FBI website or the Internet Crime Complaint Center by typing the address directly into your browser.
That removes one of the scammer’s biggest advantages: controlling the path you use to “verify” their identity.
The same rule applies to links that appear in emails, messages, advertisements, or social media posts. A page can copy government colors, logos, layouts, and wording without actually belonging to a government agency.
Before trusting a website, look carefully at the domain name.
The FBI also makes one point especially clear: the IC3 does not charge a fee to recover money and does not offer recovery services through social media.
If someone says otherwise, the claim conflicts with the agency’s own guidance.
Do not continue the conversation simply to find out what the scammer wants.
Avoid clicking links, downloading files, sending identification documents, or sharing banking information.
If you already clicked a suspicious link but did not enter information, close the page and avoid returning through the same address.
If you provided passwords or other account credentials, change them using the legitimate website or app associated with the account.
You should also report suspicious activity through the official IC3 complaint portal.
When reporting the incident, keep relevant details such as email addresses, phone numbers, usernames, website addresses, messages, and payment information. Those details may help investigators understand how the scam was carried out.
The safest habit is to treat unexpected recovery offers with skepticism, especially when someone claims to represent law enforcement.
Do not assume that a message is legitimate because it contains your name, information about a previous scam, or details about money you lost.
Criminals may already have access to information from earlier interactions, leaked data, public posts, or the original fraud.
Avoid using links provided by the person contacting you. Open official government websites separately and confirm the information yourself.
You can also use Google Safe Browsing as an additional way to check whether a website has been identified as dangerous.
Most importantly, remember the core warning from the FBI: IC3 does not charge victims to recover funds and does not conduct recovery services through social media.
Yes. The FBI issued an official warning about criminals impersonating FBI and IC3 personnel and offering fraudulent fund-recovery services to people who have already been victims of scams.
The IC3 says it does not offer fund-recovery services through social media platforms. An unexpected message on Telegram, Facebook, or another platform claiming to recover money on behalf of the IC3 should be treated as suspicious.
No. According to the FBI, the IC3 does not charge victims a fee to recover funds.
Check the domain carefully and avoid relying on links sent by the person contacting you. Visit the FBI or IC3 website independently by typing the official address into your browser.
Do not send money or personal information, avoid clicking links, save evidence of the interaction, and report the incident through the official IC3 website.
A fake FBI recovery offer can be especially effective because it targets people who are already dealing with the financial and emotional consequences of another scam.
The message may look professional. The profile may appear legitimate. The person may know details about what happened to you. They may even use an AI-generated video or a website that closely copies a government page.
None of those details prove the contact is real.
If someone claims to represent the FBI or IC3 and promises to recover your money, verify the claim independently. Do not use the links, phone numbers, or accounts the person provides.
And keep the FBI’s warning in mind: the IC3 does not charge fees to recover stolen funds and does not offer recovery services through social media.
A Google backup change can be easy to miss. As of August 10, 2026, Drive…
Do you check a QR code before you scan it? A QR code scam takes…
Want to know how to lock apps on Android with a PIN, password, pattern, or…
When you open an Incognito tab, do you assume websites, internet providers, and other people…
An old phone in a drawer, a tablet you traded in, or a computer you…
Have you ever received a message and wondered how to check if a link is…